Log in / Sign up

Vulnerability details

CVE-2026-17429

IBM Power Systems Firmware

Power System Incorrect Authorization

CVSS 3.1
8.1High

Official description

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can write arbitrary data to hardware control registers, allowing full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.

CVSS scores

ScoreVersionSourceVector
8.1High 3.1 CVEProject cvelistV5 (CNA) (ibm) CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H

Affected products

VendorProductVersionsSource
IBM Power Systems Firmware FW1120.00 CVEProject cvelistV5 (CNA)
IBM Power Systems Firmware FW1060.00 ≤ v ≤ FW1060.80 CVEProject cvelistV5 (CNA)
IBM Power Systems Firmware FW1110.00 ≤ v ≤ FW1110.30 CVEProject cvelistV5 (CNA)
IBM Power Systems Firmware FW950.00 ≤ v ≤ FW950.H2 CVEProject cvelistV5 (CNA)
IBM Power Systems Firmware OP940.00 ≤ v ≤ OP940.a1 CVEProject cvelistV5 (CNA)
IBM Power Systems Firmware OP940.00 ≤ v ≤ OP940.81 CVEProject cvelistV5 (CNA)

References and advisories

1
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-08-19
Last updated
2026-08-21
State
Published
Assigner (CNA)
ibm

Exploit prediction (EPSS)

0.15%
Probability of exploitation in 30 days
4.3%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • CWE-863
    Incorrect Authorization